Restricting processing

   This is a new right provided for in Article 18.

The data subject can restrict the processing of their personal data when:

Methods of restricting the processing of data are suggested in Recital 67.

Apart from storage, no processing of the particular data can occur without the consent of the data subject unless it is in connection with legal claims, protection of rights of another person, or in important public interests of the Union or Member State.

Before lifting the restriction on processing, the controller must inform the data subject.

   If the controller has disclosed the personal data, Article 19 applies and the controller must advise each recipient of the data in question about the restriction on processing and, if requested, the controller must inform the data subject about those recipients.